@workos-inc/node 8.0.0-rc.3 → 8.0.0-rc.4

package/lib/esm/vault/vault.d.ts

@@ -1,130 +0,0 @@
-import '../common/interfaces/pagination-options.interface.js';
-import '../common/interfaces/list.interface.js';
-export { V as Vault } from '../workos-DLj13cxf.js';
-import './interfaces/key/create-data-key.interface.js';
-import './interfaces/key/decrypt-data-key.interface.js';
-import './interfaces/key.interface.js';
-import './interfaces/object/create-object.interface.js';
-import './interfaces/object/delete-object.interface.js';
-import './interfaces/object/read-object.interface.js';
-import './interfaces/object/update-object.interface.js';
-import './interfaces/object.interface.js';
-import '../common/interfaces/get-options.interface.js';
-import '../common/interfaces/post-options.interface.js';
-import '../common/interfaces/put-options.interface.js';
-import '../common/interfaces/workos-options.interface.js';
-import '../common/interfaces/app-info.interface.js';
-import '../common/utils/pagination.js';
-import '../directory-sync/interfaces/directory.interface.js';
-import '../directory-sync/interfaces/directory-group.interface.js';
-import '../directory-sync/interfaces/list-directories-options.interface.js';
-import '../directory-sync/interfaces/list-groups-options.interface.js';
-import '../directory-sync/interfaces/list-directory-users-options.interface.js';
-import '../directory-sync/interfaces/directory-user.interface.js';
-import '../roles/interfaces/role.interface.js';
-import '../events/interfaces/list-events-options.interface.js';
-import '../common/interfaces/event.interface.js';
-import '../organizations/interfaces/organization.interface.js';
-import '../organization-domains/interfaces/organization-domain.interface.js';
-import '../sso/interfaces/connection.interface.js';
-import '../sso/interfaces/connection-type.enum.js';
-import '../user-management/interfaces/user.interface.js';
-import '../user-management/interfaces/authentication-event.interface.js';
-import '../user-management/interfaces/authentication-radar-risk-detected-event.interface.js';
-import '../user-management/interfaces/email-verification.interface.js';
-import '../user-management/interfaces/invitation.interface.js';
-import '../user-management/interfaces/organization-membership.interface.js';
-import '../user-management/interfaces/magic-auth.interface.js';
-import '../user-management/interfaces/password-reset.interface.js';
-import '../user-management/interfaces/session.interface.js';
-import '../user-management/interfaces/impersonator.interface.js';
-import '../organizations/interfaces/create-organization-options.interface.js';
-import '../organizations/interfaces/domain-data.interface.js';
-import '../organizations/interfaces/list-organization-feature-flags-options.interface.js';
-import '../organizations/interfaces/list-organizations-options.interface.js';
-import '../organizations/interfaces/update-organization-options.interface.js';
-import '../feature-flags/interfaces/feature-flag.interface.js';
-import '../organizations/interfaces/list-organization-roles-options.interface.js';
-import '../organization-domains/interfaces/create-organization-domain-options.interface.js';
-import '../passwordless/interfaces/passwordless-session.interface.js';
-import '../passwordless/interfaces/create-passwordless-session-options.interface.js';
-import '../passwordless/interfaces/send-session-response.interface.js';
-import '../portal/interfaces/generate-portal-link-intent.interface.js';
-import '../common/interfaces/unknown-record.interface.js';
-import '../sso/interfaces/authorization-url-options.interface.js';
-import '../sso/interfaces/get-profile-options.interface.js';
-import '../sso/interfaces/get-profile-and-token-options.interface.js';
-import '../sso/interfaces/list-connections-options.interface.js';
-import '../sso/interfaces/profile-and-token.interface.js';
-import '../user-management/interfaces/oauth-tokens.interface.js';
-import '../sso/interfaces/profile.interface.js';
-import '../webhooks/webhooks.js';
-import '../common/crypto/crypto-provider.js';
-import '../mfa/interfaces/challenge-factor-options.js';
-import '../mfa/interfaces/challenge.interface.js';
-import '../mfa/interfaces/enroll-factor-options.js';
-import '../mfa/interfaces/factor.interface.js';
-import '../mfa/interfaces/sms.interface.js';
-import '../mfa/interfaces/totp.interface.js';
-import '../mfa/interfaces/verify-challenge-options.js';
-import '../mfa/interfaces/verify-challenge-response.js';
-import '../audit-logs/interfaces/audit-log-export-options.interface.js';
-import '../audit-logs/interfaces/audit-log-export.interface.js';
-import '../audit-logs/interfaces/create-audit-log-event-options.interface.js';
-import '../audit-logs/interfaces/create-audit-log-schema-options.interface.js';
-import 'jose';
-import '../user-management-qKHMGyQi.js';
-import '../user-management/interfaces/authenticate-with-code-options.interface.js';
-import '../user-management/interfaces/authenticate-with-options-base.interface.js';
-import '../user-management/interfaces/authenticate-with-code-and-verifier-options.interface.js';
-import '../user-management/interfaces/authenticate-with-email-verification-options.interface.js';
-import '../user-management/interfaces/authenticate-with-magic-auth-options.interface.js';
-import '../user-management/interfaces/authenticate-with-organization-selection.interface.js';
-import '../user-management/interfaces/authenticate-with-password-options.interface.js';
-import '../user-management/interfaces/authenticate-with-refresh-token-options.interface.js';
-import '../user-management/interfaces/authenticate-with-session-cookie.interface.js';
-import '../user-management/interfaces/authentication-response.interface.js';
-import '../user-management/interfaces/authenticate-with-totp-options.interface.js';
-import '../user-management/interfaces/authorization-url-options.interface.js';
-import '../user-management/interfaces/create-magic-auth-options.interface.js';
-import '../user-management/interfaces/create-organization-membership-options.interface.js';
-import '../user-management/interfaces/create-password-reset-options.interface.js';
-import '../user-management/interfaces/create-user-options.interface.js';
-import '../user-management/interfaces/password-hash-type.interface.js';
-import '../user-management/interfaces/enroll-auth-factor.interface.js';
-import '../user-management/interfaces/factor.interface.js';
-import '../user-management/interfaces/identity.interface.js';
-import '../user-management/interfaces/list-auth-factors-options.interface.js';
-import '../user-management/interfaces/list-invitations-options.interface.js';
-import '../user-management/interfaces/list-organization-memberships-options.interface.js';
-import '../user-management/interfaces/list-sessions-options.interface.js';
-import '../user-management/interfaces/list-user-feature-flags-options.interface.js';
-import '../user-management/interfaces/list-users-options.interface.js';
-import '../user-management/interfaces/reset-password-options.interface.js';
-import '../user-management/interfaces/revoke-session-options.interface.js';
-import '../user-management/interfaces/send-invitation-options.interface.js';
-import '../user-management/interfaces/send-verification-email-options.interface.js';
-import '../user-management/interfaces/update-organization-membership-options.interface.js';
-import '../user-management/interfaces/update-user-options.interface.js';
-import '../user-management/interfaces/verify-email-options.interface.js';
-import '../user-management/interfaces/session-handler-options.interface.js';
-import '../user-management/interfaces/refresh-and-seal-session-data.interface.js';
-import '../fga/interfaces/check.interface.js';
-import '../fga/interfaces/resource.interface.js';
-import '../fga/interfaces/resource-op.enum.js';
-import '../fga/interfaces/warrant.interface.js';
-import '../fga/interfaces/warrant-op.enum.js';
-import '../fga/interfaces/check-op.enum.js';
-import '../fga/interfaces/warning.interface.js';
-import '../fga/interfaces/query.interface.js';
-import '../fga/interfaces/warrant-token.interface.js';
-import '../fga/utils/fga-paginatable.js';
-import '../fga/interfaces/list.interface.js';
-import '../common/net/http-client.js';
-import '../common/interfaces/http-client.interface.js';
-import '../widgets/interfaces/get-token.js';
-import '../actions/actions.js';
-import '../actions/interfaces/action.interface.js';
-import '../actions/interfaces/response-payload.interface.js';
-import '../api-keys/interfaces/validate-api-key.interface.js';
-import '../api-keys/interfaces/api-key.interface.js';

package/lib/esm/vault/vault.js

@@ -1,157 +0,0 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-import { decodeUInt32, encodeUInt32 } from "../common/utils/leb128.js";
-import { base64ToUint8Array, uint8ArrayToBase64 } from "../common/utils/base64.js";
-import {
-  deserializeCreateDataKeyResponse,
-  deserializeDecryptDataKeyResponse
-} from "./serializers/vault-key.serializer.js";
-import {
-  deserializeListObjects,
-  deserializeObject,
-  deserializeObjectMetadata,
-  desrializeListObjectVersions,
-  serializeCreateObjectEntity,
-  serializeUpdateObjectEntity
-} from "./serializers/vault-object.serializer.js";
-class Vault {
-  constructor(workos) {
-    this.workos = workos;
-    this.cryptoProvider = workos.getCryptoProvider();
-  }
-  static {
-    __name(this, "Vault");
-  }
-  cryptoProvider;
-  decode(payload) {
-    const inputData = base64ToUint8Array(payload);
-    const iv = new Uint8Array(inputData.subarray(0, 12));
-    const tag = new Uint8Array(inputData.subarray(12, 28));
-    const { value: keyLen, nextIndex } = decodeUInt32(inputData, 28);
-    const keysBuffer = inputData.subarray(nextIndex, nextIndex + keyLen);
-    const keys = uint8ArrayToBase64(keysBuffer);
-    const ciphertext = new Uint8Array(inputData.subarray(nextIndex + keyLen));
-    return {
-      iv,
-      tag,
-      keys,
-      ciphertext
-    };
-  }
-  async createObject(options) {
-    const { data } = await this.workos.post(
-      `/vault/v1/kv`,
-      serializeCreateObjectEntity(options)
-    );
-    return deserializeObjectMetadata(data);
-  }
-  async listObjects(options) {
-    const url = new URL("/vault/v1/kv", this.workos.baseURL);
-    if (options?.after) {
-      url.searchParams.set("after", options.after);
-    }
-    if (options?.limit) {
-      url.searchParams.set("limit", options.limit.toString());
-    }
-    const { data } = await this.workos.get(
-      url.toString()
-    );
-    return deserializeListObjects(data);
-  }
-  async listObjectVersions(options) {
-    const { data } = await this.workos.get(
-      `/vault/v1/kv/${encodeURIComponent(options.id)}/versions`
-    );
-    return desrializeListObjectVersions(data);
-  }
-  async readObject(options) {
-    const { data } = await this.workos.get(
-      `/vault/v1/kv/${encodeURIComponent(options.id)}`
-    );
-    return deserializeObject(data);
-  }
-  async describeObject(options) {
-    const { data } = await this.workos.get(
-      `/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`
-    );
-    return deserializeObject(data);
-  }
-  async updateObject(options) {
-    const { data } = await this.workos.put(
-      `/vault/v1/kv/${encodeURIComponent(options.id)}`,
-      serializeUpdateObjectEntity(options)
-    );
-    return deserializeObject(data);
-  }
-  async deleteObject(options) {
-    return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);
-  }
-  async createDataKey(options) {
-    const { data } = await this.workos.post(
-      `/vault/v1/keys/data-key`,
-      options
-    );
-    return deserializeCreateDataKeyResponse(data);
-  }
-  async decryptDataKey(options) {
-    const { data } = await this.workos.post(
-      `/vault/v1/keys/decrypt`,
-      options
-    );
-    return deserializeDecryptDataKeyResponse(data);
-  }
-  async encrypt(data, context, associatedData) {
-    const keyPair = await this.createDataKey({
-      context
-    });
-    const encoder = new TextEncoder();
-    const key = base64ToUint8Array(keyPair.dataKey.key);
-    const keyBlob = base64ToUint8Array(keyPair.encryptedKeys);
-    const prefixLenBuffer = encodeUInt32(keyBlob.length);
-    const aadBuffer = associatedData ? encoder.encode(associatedData) : void 0;
-    const iv = this.cryptoProvider.randomBytes(12);
-    const {
-      ciphertext,
-      iv: resultIv,
-      tag
-    } = await this.cryptoProvider.encrypt(
-      encoder.encode(data),
-      key,
-      iv,
-      aadBuffer
-    );
-    const resultArray = new Uint8Array(
-      resultIv.length + tag.length + prefixLenBuffer.length + keyBlob.length + ciphertext.length
-    );
-    let offset = 0;
-    resultArray.set(resultIv, offset);
-    offset += resultIv.length;
-    resultArray.set(tag, offset);
-    offset += tag.length;
-    resultArray.set(new Uint8Array(prefixLenBuffer), offset);
-    offset += prefixLenBuffer.length;
-    resultArray.set(keyBlob, offset);
-    offset += keyBlob.length;
-    resultArray.set(ciphertext, offset);
-    return uint8ArrayToBase64(resultArray);
-  }
-  async decrypt(encryptedData, associatedData) {
-    const decoded = this.decode(encryptedData);
-    const dataKey = await this.decryptDataKey({ keys: decoded.keys });
-    const key = base64ToUint8Array(dataKey.key);
-    const encoder = new TextEncoder();
-    const aadBuffer = associatedData ? encoder.encode(associatedData) : void 0;
-    const decrypted = await this.cryptoProvider.decrypt(
-      decoded.ciphertext,
-      key,
-      decoded.iv,
-      decoded.tag,
-      aadBuffer
-    );
-    return new TextDecoder().decode(decrypted);
-  }
-}
-export {
-  Vault
-};
-//# sourceMappingURL=vault.js.map

package/lib/esm/vault/vault.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/vault/vault.ts"],"sourcesContent":["import { decodeUInt32, encodeUInt32 } from '../common/utils/leb128';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { List, ListResponse } from '../common/interfaces';\nimport { PaginationOptions } from '../index.worker';\nimport { base64ToUint8Array, uint8ArrayToBase64 } from '../common/utils/base64';\nimport type { WorkOS } from '../workos';\nimport {\n  CreateDataKeyOptions,\n  CreateDataKeyResponse,\n  CreateObjectOptions,\n  DataKey,\n  DataKeyPair,\n  DecryptDataKeyOptions,\n  DecryptDataKeyResponse,\n  DeleteObjectOptions,\n  KeyContext,\n  ListObjectVersionsResponse,\n  ObjectDigest,\n  ObjectDigestResponse,\n  ObjectMetadata,\n  ObjectVersion,\n  ReadObjectMetadataResponse,\n  ReadObjectOptions,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  VaultObject,\n} from './interfaces';\nimport {\n  deserializeCreateDataKeyResponse,\n  deserializeDecryptDataKeyResponse,\n} from './serializers/vault-key.serializer';\nimport {\n  deserializeListObjects,\n  deserializeObject,\n  deserializeObjectMetadata,\n  desrializeListObjectVersions,\n  serializeCreateObjectEntity,\n  serializeUpdateObjectEntity,\n} from './serializers/vault-object.serializer';\n\ninterface Decoded {\n  iv: Uint8Array;\n  tag: Uint8Array;\n  keys: string;\n  ciphertext: Uint8Array;\n}\n\nexport class Vault {\n  private cryptoProvider: CryptoProvider;\n\n  constructor(private readonly workos: WorkOS) {\n    this.cryptoProvider = workos.getCryptoProvider();\n  }\n\n  private decode(payload: string): Decoded {\n    const inputData = base64ToUint8Array(payload);\n    // Use 12 bytes for IV (standard for AES-GCM)\n    const iv = new Uint8Array(inputData.subarray(0, 12));\n    const tag = new Uint8Array(inputData.subarray(12, 28));\n    const { value: keyLen, nextIndex } = decodeUInt32(inputData, 28);\n\n    // Use subarray instead of slice and convert directly to base64\n    const keysBuffer = inputData.subarray(nextIndex, nextIndex + keyLen);\n    const keys = uint8ArrayToBase64(keysBuffer);\n\n    const ciphertext = new Uint8Array(inputData.subarray(nextIndex + keyLen));\n\n    return {\n      iv,\n      tag,\n      keys,\n      ciphertext,\n    };\n  }\n\n  async createObject(options: CreateObjectOptions): Promise<ObjectMetadata> {\n    const { data } = await this.workos.post<ReadObjectMetadataResponse>(\n      `/vault/v1/kv`,\n      serializeCreateObjectEntity(options),\n    );\n    return deserializeObjectMetadata(data);\n  }\n\n  async listObjects(\n    options?: PaginationOptions | undefined,\n  ): Promise<List<ObjectDigest>> {\n    const url = new URL('/vault/v1/kv', this.workos.baseURL);\n    if (options?.after) {\n      url.searchParams.set('after', options.after);\n    }\n    if (options?.limit) {\n      url.searchParams.set('limit', options.limit.toString());\n    }\n\n    const { data } = await this.workos.get<ListResponse<ObjectDigestResponse>>(\n      url.toString(),\n    );\n    return deserializeListObjects(data);\n  }\n\n  async listObjectVersions(\n    options: ReadObjectOptions,\n  ): Promise<ObjectVersion[]> {\n    const { data } = await this.workos.get<ListObjectVersionsResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/versions`,\n    );\n    return desrializeListObjectVersions(data);\n  }\n\n  async readObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async describeObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`,\n    );\n    return deserializeObject(data);\n  }\n\n  async updateObject(options: UpdateObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.put<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n      serializeUpdateObjectEntity(options),\n    );\n    return deserializeObject(data);\n  }\n\n  async deleteObject(options: DeleteObjectOptions): Promise<void> {\n    return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);\n  }\n\n  async createDataKey(options: CreateDataKeyOptions): Promise<DataKeyPair> {\n    const { data } = await this.workos.post<CreateDataKeyResponse>(\n      `/vault/v1/keys/data-key`,\n      options,\n    );\n    return deserializeCreateDataKeyResponse(data);\n  }\n\n  async decryptDataKey(options: DecryptDataKeyOptions): Promise<DataKey> {\n    const { data } = await this.workos.post<DecryptDataKeyResponse>(\n      `/vault/v1/keys/decrypt`,\n      options,\n    );\n    return deserializeDecryptDataKeyResponse(data);\n  }\n\n  async encrypt(\n    data: string,\n    context: KeyContext,\n    associatedData?: string,\n  ): Promise<string> {\n    const keyPair = await this.createDataKey({\n      context,\n    });\n\n    // Convert base64 key to Uint8Array\n    const encoder = new TextEncoder();\n\n    // Use our cross-runtime base64 utility\n    const key = base64ToUint8Array(keyPair.dataKey.key);\n    const keyBlob = base64ToUint8Array(keyPair.encryptedKeys);\n\n    const prefixLenBuffer = encodeUInt32(keyBlob.length);\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    // Use a 12-byte IV for AES-GCM (industry standard)\n    const iv = this.cryptoProvider.randomBytes(12);\n\n    const {\n      ciphertext,\n      iv: resultIv,\n      tag,\n    } = await this.cryptoProvider.encrypt(\n      encoder.encode(data),\n      key,\n      iv,\n      aadBuffer,\n    );\n\n    // Concatenate all parts into a single array\n    const resultArray = new Uint8Array(\n      resultIv.length +\n        tag.length +\n        prefixLenBuffer.length +\n        keyBlob.length +\n        ciphertext.length,\n    );\n\n    let offset = 0;\n    resultArray.set(resultIv, offset);\n    offset += resultIv.length;\n\n    resultArray.set(tag, offset);\n    offset += tag.length;\n\n    resultArray.set(new Uint8Array(prefixLenBuffer), offset);\n    offset += prefixLenBuffer.length;\n\n    resultArray.set(keyBlob, offset);\n    offset += keyBlob.length;\n\n    resultArray.set(ciphertext, offset);\n\n    // Convert to base64 using our cross-runtime utility\n    return uint8ArrayToBase64(resultArray);\n  }\n\n  async decrypt(\n    encryptedData: string,\n    associatedData?: string,\n  ): Promise<string> {\n    const decoded = this.decode(encryptedData);\n    const dataKey = await this.decryptDataKey({ keys: decoded.keys });\n\n    // Convert base64 key to Uint8Array using our cross-runtime utility\n    const key = base64ToUint8Array(dataKey.key);\n\n    const encoder = new TextEncoder();\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    const decrypted = await this.cryptoProvider.decrypt(\n      decoded.ciphertext,\n      key,\n      decoded.iv,\n      decoded.tag,\n      aadBuffer,\n    );\n\n    return new TextDecoder().decode(decrypted);\n  }\n}\n"],"mappings":";;AAAA,SAAS,cAAc,oBAAoB;AAI3C,SAAS,oBAAoB,0BAA0B;AAuBvD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASA,MAAM,MAAM;AAAA,EAGjB,YAA6B,QAAgB;AAAhB;AAC3B,SAAK,iBAAiB,OAAO,kBAAkB;AAAA,EACjD;AAAA,EApDF,OA+CmB;AAAA;AAAA;AAAA,EACT;AAAA,EAMA,OAAO,SAA0B;AACvC,UAAM,YAAY,mBAAmB,OAAO;AAE5C,UAAM,KAAK,IAAI,WAAW,UAAU,SAAS,GAAG,EAAE,CAAC;AACnD,UAAM,MAAM,IAAI,WAAW,UAAU,SAAS,IAAI,EAAE,CAAC;AACrD,UAAM,EAAE,OAAO,QAAQ,UAAU,IAAI,aAAa,WAAW,EAAE;AAG/D,UAAM,aAAa,UAAU,SAAS,WAAW,YAAY,MAAM;AACnE,UAAM,OAAO,mBAAmB,UAAU;AAE1C,UAAM,aAAa,IAAI,WAAW,UAAU,SAAS,YAAY,MAAM,CAAC;AAExE,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,SAAuD;AACxE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC;AAAA,MACA,4BAA4B,OAAO;AAAA,IACrC;AACA,WAAO,0BAA0B,IAAI;AAAA,EACvC;AAAA,EAEA,MAAM,YACJ,SAC6B;AAC7B,UAAM,MAAM,IAAI,IAAI,gBAAgB,KAAK,OAAO,OAAO;AACvD,QAAI,SAAS,OAAO;AAClB,UAAI,aAAa,IAAI,SAAS,QAAQ,KAAK;AAAA,IAC7C;AACA,QAAI,SAAS,OAAO;AAClB,UAAI,aAAa,IAAI,SAAS,QAAQ,MAAM,SAAS,CAAC;AAAA,IACxD;AAEA,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,IAAI,SAAS;AAAA,IACf;AACA,WAAO,uBAAuB,IAAI;AAAA,EACpC;AAAA,EAEA,MAAM,mBACJ,SAC0B;AAC1B,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC;AAAA,IAChD;AACA,WAAO,6BAA6B,IAAI;AAAA,EAC1C;AAAA,EAEA,MAAM,WAAW,SAAkD;AACjE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC;AAAA,IAChD;AACA,WAAO,kBAAkB,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAM,eAAe,SAAkD;AACrE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC;AAAA,IAChD;AACA,WAAO,kBAAkB,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAM,aAAa,SAAoD;AACrE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC;AAAA,MAC9C,4BAA4B,OAAO;AAAA,IACrC;AACA,WAAO,kBAAkB,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAM,aAAa,SAA6C;AAC9D,WAAO,KAAK,OAAO,OAAO,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC,EAAE;AAAA,EAC5E;AAAA,EAEA,MAAM,cAAc,SAAqD;AACvE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AACA,WAAO,iCAAiC,IAAI;AAAA,EAC9C;AAAA,EAEA,MAAM,eAAe,SAAkD;AACrE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AACA,WAAO,kCAAkC,IAAI;AAAA,EAC/C;AAAA,EAEA,MAAM,QACJ,MACA,SACA,gBACiB;AACjB,UAAM,UAAU,MAAM,KAAK,cAAc;AAAA,MACvC;AAAA,IACF,CAAC;AAGD,UAAM,UAAU,IAAI,YAAY;AAGhC,UAAM,MAAM,mBAAmB,QAAQ,QAAQ,GAAG;AAClD,UAAM,UAAU,mBAAmB,QAAQ,aAAa;AAExD,UAAM,kBAAkB,aAAa,QAAQ,MAAM;AACnD,UAAM,YAAY,iBACd,QAAQ,OAAO,cAAc,IAC7B;AAGJ,UAAM,KAAK,KAAK,eAAe,YAAY,EAAE;AAE7C,UAAM;AAAA,MACJ;AAAA,MACA,IAAI;AAAA,MACJ;AAAA,IACF,IAAI,MAAM,KAAK,eAAe;AAAA,MAC5B,QAAQ,OAAO,IAAI;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAGA,UAAM,cAAc,IAAI;AAAA,MACtB,SAAS,SACP,IAAI,SACJ,gBAAgB,SAChB,QAAQ,SACR,WAAW;AAAA,IACf;AAEA,QAAI,SAAS;AACb,gBAAY,IAAI,UAAU,MAAM;AAChC,cAAU,SAAS;AAEnB,gBAAY,IAAI,KAAK,MAAM;AAC3B,cAAU,IAAI;AAEd,gBAAY,IAAI,IAAI,WAAW,eAAe,GAAG,MAAM;AACvD,cAAU,gBAAgB;AAE1B,gBAAY,IAAI,SAAS,MAAM;AAC/B,cAAU,QAAQ;AAElB,gBAAY,IAAI,YAAY,MAAM;AAGlC,WAAO,mBAAmB,WAAW;AAAA,EACvC;AAAA,EAEA,MAAM,QACJ,eACA,gBACiB;AACjB,UAAM,UAAU,KAAK,OAAO,aAAa;AACzC,UAAM,UAAU,MAAM,KAAK,eAAe,EAAE,MAAM,QAAQ,KAAK,CAAC;AAGhE,UAAM,MAAM,mBAAmB,QAAQ,GAAG;AAE1C,UAAM,UAAU,IAAI,YAAY;AAChC,UAAM,YAAY,iBACd,QAAQ,OAAO,cAAc,IAC7B;AAEJ,UAAM,YAAY,MAAM,KAAK,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,WAAO,IAAI,YAAY,EAAE,OAAO,SAAS;AAAA,EAC3C;AACF;","names":[]}

package/lib/esm/webhooks/webhooks.d.ts

@@ -1,41 +0,0 @@
-import { Event } from '../common/interfaces/event.interface.js';
-import { CryptoProvider } from '../common/crypto/crypto-provider.js';
-import '../directory-sync/interfaces/directory.interface.js';
-import '../directory-sync/interfaces/directory-group.interface.js';
-import '../directory-sync/interfaces/directory-user.interface.js';
-import '../roles/interfaces/role.interface.js';
-import '../organizations/interfaces/organization.interface.js';
-import '../organization-domains/interfaces/organization-domain.interface.js';
-import '../sso/interfaces/connection.interface.js';
-import '../sso/interfaces/connection-type.enum.js';
-import '../user-management/interfaces/user.interface.js';
-import '../user-management/interfaces/authentication-event.interface.js';
-import '../user-management/interfaces/authentication-radar-risk-detected-event.interface.js';
-import '../user-management/interfaces/email-verification.interface.js';
-import '../user-management/interfaces/invitation.interface.js';
-import '../user-management/interfaces/organization-membership.interface.js';
-import '../user-management/interfaces/magic-auth.interface.js';
-import '../user-management/interfaces/password-reset.interface.js';
-import '../user-management/interfaces/session.interface.js';
-import '../user-management/interfaces/impersonator.interface.js';
-
-declare class Webhooks {
-    private signatureProvider;
-    constructor(cryptoProvider: CryptoProvider);
-    get verifyHeader(): ({ payload, sigHeader, secret, tolerance, }: {
-        payload: any;
-        sigHeader: string;
-        secret: string;
-        tolerance?: number;
-    }) => Promise<boolean>;
-    get computeSignature(): (timestamp: any, payload: any, secret: string) => Promise<string>;
-    get getTimestampAndSignatureHash(): (sigHeader: string) => [string, string];
-    constructEvent({ payload, sigHeader, secret, tolerance, }: {
-        payload: Record<string, unknown>;
-        sigHeader: string;
-        secret: string;
-        tolerance?: number;
-    }): Promise<Event>;
-}
-
-export { Webhooks };

package/lib/esm/webhooks/webhooks.js

@@ -1,39 +0,0 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-import { deserializeEvent } from "../common/serializers/index.js";
-import { SignatureProvider } from "../common/crypto/signature-provider.js";
-class Webhooks {
-  static {
-    __name(this, "Webhooks");
-  }
-  signatureProvider;
-  constructor(cryptoProvider) {
-    this.signatureProvider = new SignatureProvider(cryptoProvider);
-  }
-  get verifyHeader() {
-    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);
-  }
-  get computeSignature() {
-    return this.signatureProvider.computeSignature.bind(this.signatureProvider);
-  }
-  get getTimestampAndSignatureHash() {
-    return this.signatureProvider.getTimestampAndSignatureHash.bind(
-      this.signatureProvider
-    );
-  }
-  async constructEvent({
-    payload,
-    sigHeader,
-    secret,
-    tolerance = 18e4
-  }) {
-    const options = { payload, sigHeader, secret, tolerance };
-    await this.verifyHeader(options);
-    const webhookPayload = payload;
-    return deserializeEvent(webhookPayload);
-  }
-}
-export {
-  Webhooks
-};
-//# sourceMappingURL=webhooks.js.map

package/lib/esm/webhooks/webhooks.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/webhooks/webhooks.ts"],"sourcesContent":["import { deserializeEvent } from '../common/serializers';\nimport { Event, EventResponse } from '../common/interfaces';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\n\nexport class Webhooks {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get getTimestampAndSignatureHash() {\n    return this.signatureProvider.getTimestampAndSignatureHash.bind(\n      this.signatureProvider,\n    );\n  }\n\n  async constructEvent({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: Record<string, unknown>;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<Event> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    const webhookPayload = payload as unknown as EventResponse;\n\n    return deserializeEvent(webhookPayload);\n  }\n}\n"],"mappings":";;AAAA,SAAS,wBAAwB;AAEjC,SAAS,yBAAyB;AAG3B,MAAM,SAAS;AAAA,EALtB,OAKsB;AAAA;AAAA;AAAA,EACZ;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,kBAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,IAAI,mBAAmB;AACrB,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,+BAA+B;AACjC,WAAO,KAAK,kBAAkB,6BAA6B;AAAA,MACzD,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EAEA,MAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAKmB;AACjB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,UAAM,iBAAiB;AAEvB,WAAO,iBAAiB,cAAc;AAAA,EACxC;AACF;","names":[]}

package/lib/esm/widgets/interfaces/get-token.d.ts

@@ -1,21 +0,0 @@
-type WidgetScope = 'widgets:users-table:manage' | 'widgets:sso:manage' | 'widgets:domain-verification:manage' | 'widgets:api-keys:manage';
-interface GetTokenOptions {
-    organizationId: string;
-    userId?: string;
-    scopes?: WidgetScope[];
-}
-interface SerializedGetTokenOptions {
-    organization_id: string;
-    user_id?: string;
-    scopes?: WidgetScope[];
-}
-declare const serializeGetTokenOptions: (options: GetTokenOptions) => SerializedGetTokenOptions;
-interface GetTokenResponse {
-    token: string;
-}
-interface GetTokenResponseResponse {
-    token: string;
-}
-declare const deserializeGetTokenResponse: (data: GetTokenResponseResponse) => GetTokenResponse;
-
-export { type GetTokenOptions, type GetTokenResponse, type GetTokenResponseResponse, type SerializedGetTokenOptions, type WidgetScope, deserializeGetTokenResponse, serializeGetTokenOptions };

package/lib/esm/widgets/interfaces/get-token.js

@@ -1,15 +0,0 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-const serializeGetTokenOptions = /* @__PURE__ */ __name((options) => ({
-  organization_id: options.organizationId,
-  user_id: options.userId,
-  scopes: options.scopes
-}), "serializeGetTokenOptions");
-const deserializeGetTokenResponse = /* @__PURE__ */ __name((data) => ({
-  token: data.token
-}), "deserializeGetTokenResponse");
-export {
-  deserializeGetTokenResponse,
-  serializeGetTokenOptions
-};
-//# sourceMappingURL=get-token.js.map

package/lib/esm/widgets/interfaces/get-token.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/widgets/interfaces/get-token.ts"],"sourcesContent":["export type WidgetScope =\n  | 'widgets:users-table:manage'\n  | 'widgets:sso:manage'\n  | 'widgets:domain-verification:manage'\n  | 'widgets:api-keys:manage';\nexport interface GetTokenOptions {\n  organizationId: string;\n  userId?: string;\n  scopes?: WidgetScope[];\n}\n\nexport interface SerializedGetTokenOptions {\n  organization_id: string;\n  user_id?: string;\n  scopes?: WidgetScope[];\n}\n\nexport const serializeGetTokenOptions = (\n  options: GetTokenOptions,\n): SerializedGetTokenOptions => ({\n  organization_id: options.organizationId,\n  user_id: options.userId,\n  scopes: options.scopes,\n});\n\nexport interface GetTokenResponse {\n  token: string;\n}\n\nexport interface GetTokenResponseResponse {\n  token: string;\n}\n\nexport const deserializeGetTokenResponse = (\n  data: GetTokenResponseResponse,\n): GetTokenResponse => ({\n  token: data.token,\n});\n"],"mappings":";;AAiBO,MAAM,2BAA2B,wBACtC,aAC+B;AAAA,EAC/B,iBAAiB,QAAQ;AAAA,EACzB,SAAS,QAAQ;AAAA,EACjB,QAAQ,QAAQ;AAClB,IANwC;AAgBjC,MAAM,8BAA8B,wBACzC,UACsB;AAAA,EACtB,OAAO,KAAK;AACd,IAJ2C;","names":[]}

package/lib/esm/widgets/widgets.d.ts

@@ -1,130 +0,0 @@
-export { d as Widgets } from '../workos-DLj13cxf.js';
-import './interfaces/get-token.js';
-import '../common/interfaces/get-options.interface.js';
-import '../common/interfaces/post-options.interface.js';
-import '../common/interfaces/put-options.interface.js';
-import '../common/interfaces/workos-options.interface.js';
-import '../common/interfaces/app-info.interface.js';
-import '../common/utils/pagination.js';
-import '../common/interfaces/pagination-options.interface.js';
-import '../common/interfaces/list.interface.js';
-import '../directory-sync/interfaces/directory.interface.js';
-import '../directory-sync/interfaces/directory-group.interface.js';
-import '../directory-sync/interfaces/list-directories-options.interface.js';
-import '../directory-sync/interfaces/list-groups-options.interface.js';
-import '../directory-sync/interfaces/list-directory-users-options.interface.js';
-import '../directory-sync/interfaces/directory-user.interface.js';
-import '../roles/interfaces/role.interface.js';
-import '../events/interfaces/list-events-options.interface.js';
-import '../common/interfaces/event.interface.js';
-import '../organizations/interfaces/organization.interface.js';
-import '../organization-domains/interfaces/organization-domain.interface.js';
-import '../sso/interfaces/connection.interface.js';
-import '../sso/interfaces/connection-type.enum.js';
-import '../user-management/interfaces/user.interface.js';
-import '../user-management/interfaces/authentication-event.interface.js';
-import '../user-management/interfaces/authentication-radar-risk-detected-event.interface.js';
-import '../user-management/interfaces/email-verification.interface.js';
-import '../user-management/interfaces/invitation.interface.js';
-import '../user-management/interfaces/organization-membership.interface.js';
-import '../user-management/interfaces/magic-auth.interface.js';
-import '../user-management/interfaces/password-reset.interface.js';
-import '../user-management/interfaces/session.interface.js';
-import '../user-management/interfaces/impersonator.interface.js';
-import '../organizations/interfaces/create-organization-options.interface.js';
-import '../organizations/interfaces/domain-data.interface.js';
-import '../organizations/interfaces/list-organization-feature-flags-options.interface.js';
-import '../organizations/interfaces/list-organizations-options.interface.js';
-import '../organizations/interfaces/update-organization-options.interface.js';
-import '../feature-flags/interfaces/feature-flag.interface.js';
-import '../organizations/interfaces/list-organization-roles-options.interface.js';
-import '../organization-domains/interfaces/create-organization-domain-options.interface.js';
-import '../passwordless/interfaces/passwordless-session.interface.js';
-import '../passwordless/interfaces/create-passwordless-session-options.interface.js';
-import '../passwordless/interfaces/send-session-response.interface.js';
-import '../portal/interfaces/generate-portal-link-intent.interface.js';
-import '../common/interfaces/unknown-record.interface.js';
-import '../sso/interfaces/authorization-url-options.interface.js';
-import '../sso/interfaces/get-profile-options.interface.js';
-import '../sso/interfaces/get-profile-and-token-options.interface.js';
-import '../sso/interfaces/list-connections-options.interface.js';
-import '../sso/interfaces/profile-and-token.interface.js';
-import '../user-management/interfaces/oauth-tokens.interface.js';
-import '../sso/interfaces/profile.interface.js';
-import '../webhooks/webhooks.js';
-import '../common/crypto/crypto-provider.js';
-import '../mfa/interfaces/challenge-factor-options.js';
-import '../mfa/interfaces/challenge.interface.js';
-import '../mfa/interfaces/enroll-factor-options.js';
-import '../mfa/interfaces/factor.interface.js';
-import '../mfa/interfaces/sms.interface.js';
-import '../mfa/interfaces/totp.interface.js';
-import '../mfa/interfaces/verify-challenge-options.js';
-import '../mfa/interfaces/verify-challenge-response.js';
-import '../audit-logs/interfaces/audit-log-export-options.interface.js';
-import '../audit-logs/interfaces/audit-log-export.interface.js';
-import '../audit-logs/interfaces/create-audit-log-event-options.interface.js';
-import '../audit-logs/interfaces/create-audit-log-schema-options.interface.js';
-import 'jose';
-import '../user-management-qKHMGyQi.js';
-import '../user-management/interfaces/authenticate-with-code-options.interface.js';
-import '../user-management/interfaces/authenticate-with-options-base.interface.js';
-import '../user-management/interfaces/authenticate-with-code-and-verifier-options.interface.js';
-import '../user-management/interfaces/authenticate-with-email-verification-options.interface.js';
-import '../user-management/interfaces/authenticate-with-magic-auth-options.interface.js';
-import '../user-management/interfaces/authenticate-with-organization-selection.interface.js';
-import '../user-management/interfaces/authenticate-with-password-options.interface.js';
-import '../user-management/interfaces/authenticate-with-refresh-token-options.interface.js';
-import '../user-management/interfaces/authenticate-with-session-cookie.interface.js';
-import '../user-management/interfaces/authentication-response.interface.js';
-import '../user-management/interfaces/authenticate-with-totp-options.interface.js';
-import '../user-management/interfaces/authorization-url-options.interface.js';
-import '../user-management/interfaces/create-magic-auth-options.interface.js';
-import '../user-management/interfaces/create-organization-membership-options.interface.js';
-import '../user-management/interfaces/create-password-reset-options.interface.js';
-import '../user-management/interfaces/create-user-options.interface.js';
-import '../user-management/interfaces/password-hash-type.interface.js';
-import '../user-management/interfaces/enroll-auth-factor.interface.js';
-import '../user-management/interfaces/factor.interface.js';
-import '../user-management/interfaces/identity.interface.js';
-import '../user-management/interfaces/list-auth-factors-options.interface.js';
-import '../user-management/interfaces/list-invitations-options.interface.js';
-import '../user-management/interfaces/list-organization-memberships-options.interface.js';
-import '../user-management/interfaces/list-sessions-options.interface.js';
-import '../user-management/interfaces/list-user-feature-flags-options.interface.js';
-import '../user-management/interfaces/list-users-options.interface.js';
-import '../user-management/interfaces/reset-password-options.interface.js';
-import '../user-management/interfaces/revoke-session-options.interface.js';
-import '../user-management/interfaces/send-invitation-options.interface.js';
-import '../user-management/interfaces/send-verification-email-options.interface.js';
-import '../user-management/interfaces/update-organization-membership-options.interface.js';
-import '../user-management/interfaces/update-user-options.interface.js';
-import '../user-management/interfaces/verify-email-options.interface.js';
-import '../user-management/interfaces/session-handler-options.interface.js';
-import '../user-management/interfaces/refresh-and-seal-session-data.interface.js';
-import '../fga/interfaces/check.interface.js';
-import '../fga/interfaces/resource.interface.js';
-import '../fga/interfaces/resource-op.enum.js';
-import '../fga/interfaces/warrant.interface.js';
-import '../fga/interfaces/warrant-op.enum.js';
-import '../fga/interfaces/check-op.enum.js';
-import '../fga/interfaces/warning.interface.js';
-import '../fga/interfaces/query.interface.js';
-import '../fga/interfaces/warrant-token.interface.js';
-import '../fga/utils/fga-paginatable.js';
-import '../fga/interfaces/list.interface.js';
-import '../common/net/http-client.js';
-import '../common/interfaces/http-client.interface.js';
-import '../actions/actions.js';
-import '../actions/interfaces/action.interface.js';
-import '../actions/interfaces/response-payload.interface.js';
-import '../vault/interfaces/key/create-data-key.interface.js';
-import '../vault/interfaces/key.interface.js';
-import '../vault/interfaces/key/decrypt-data-key.interface.js';
-import '../vault/interfaces/object/create-object.interface.js';
-import '../vault/interfaces/object/delete-object.interface.js';
-import '../vault/interfaces/object/read-object.interface.js';
-import '../vault/interfaces/object.interface.js';
-import '../vault/interfaces/object/update-object.interface.js';
-import '../api-keys/interfaces/validate-api-key.interface.js';
-import '../api-keys/interfaces/api-key.interface.js';

package/lib/esm/widgets/widgets.js

@@ -1,22 +0,0 @@
-var __defProp = Object.defineProperty;
-var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-import {
-  deserializeGetTokenResponse,
-  serializeGetTokenOptions
-} from "./interfaces/get-token.js";
-class Widgets {
-  constructor(workos) {
-    this.workos = workos;
-  }
-  static {
-    __name(this, "Widgets");
-  }
-  async getToken(payload) {
-    const { data } = await this.workos.post("/widgets/token", serializeGetTokenOptions(payload));
-    return deserializeGetTokenResponse(data).token;
-  }
-}
-export {
-  Widgets
-};
-//# sourceMappingURL=widgets.js.map

package/lib/esm/widgets/widgets.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/widgets/widgets.ts"],"sourcesContent":["import { WorkOS } from '../workos';\nimport {\n  deserializeGetTokenResponse,\n  GetTokenOptions,\n  GetTokenResponseResponse,\n  SerializedGetTokenOptions,\n  serializeGetTokenOptions,\n} from './interfaces/get-token';\n\nexport class Widgets {\n  constructor(private readonly workos: WorkOS) {}\n\n  async getToken(payload: GetTokenOptions): Promise<string> {\n    const { data } = await this.workos.post<\n      GetTokenResponseResponse,\n      SerializedGetTokenOptions\n    >('/widgets/token', serializeGetTokenOptions(payload));\n\n    return deserializeGetTokenResponse(data).token;\n  }\n}\n"],"mappings":";;AACA;AAAA,EACE;AAAA,EAIA;AAAA,OACK;AAEA,MAAM,QAAQ;AAAA,EACnB,YAA6B,QAAgB;AAAhB;AAAA,EAAiB;AAAA,EAVhD,OASqB;AAAA;AAAA;AAAA,EAGnB,MAAM,SAAS,SAA2C;AACxD,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO,KAGjC,kBAAkB,yBAAyB,OAAO,CAAC;AAErD,WAAO,4BAA4B,IAAI,EAAE;AAAA,EAC3C;AACF;","names":[]}